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Unlicensed-radio access networks in mobile cellular communication networks 

5 Field of invention 

The invention relates to cellular mobile communication networks having 
unlicensed-radio access networks. The invention has specific relevance to 
paging within the coverage area of an unlicensed-radio access network. 

10 Background art 

In any cellular mobile communication system, such as a GSM network, 
mobility management, i.e. the location of subscribers or mobile stations is 
handled on different levels. At the topmost level, the home location registers 
(HLR) hold data on which part of a network a mobile subscriber is roaming in 

15 and also which visitor location register (VLR) the mobile subscriber is 

currently registered with. Visitor location registers (VLR) hold data on which 
location area (LA) a mobile subscriber is currently in. A location area is 
controlled by a mobile switching center (MSG) and a number of base station 
controllers (BSC) and is divided into several cells each representing the 

20 coverage area of a base station transceiver (BTS). The location area is 

broadcast in each cell by the base transceiver station BTS. A roaming mobile 
station is thus able to detect when it moves from one location area to the next 
and can inform the visitor location register VLR. However, if the mobile 
station simply moves from one cell to another within the same location area 

25 the visitor location area is not informed. This means that in order to locate a 

mobile station within the network the core network knows only which location 
area the mobile is in and must page the mobile in all cells within this location 
area. 



30 Conventional cellular networks can be extended by adding access networks 
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that utilise a low power unlicensed-radio interface to communicate with 
mobile stations. These access networks are designed to be used together with 
the core elements of a standard public mobile network and consist essentially 
of plug-in low-power unlicensed radio transceivers, or access points, each 
5 designed to establish an unlicensed radio link with a mobile station MS and a 

controller or interface node connecting the unlicensed radio transceivers with 
the mobile core network. Suitable unlicensed-radio formats include digital 
enhanced cordless telecommunications (DECT), wireless LAN and Bluetooth. 
An adapted mobile handset capable of operating over both the standard air 

10 interface (e.g. the Um interface) and the unlicensed-radio interface means that 

the subscriber requires only one phone for all environments. The access 
network is constructed so that the core elements, such as the mobile switching 
centers MSC, of the public mobile network views the interface node as a 
conventional base station controller BSC. Such an access network and the 

15 mobile station for use with this access network are described in European 

patent application No. EP-A-1 207 708. 

The low power and resultant low range of the unlicensed-radio interface 
means that several such access networks may be provided in relatively close 

20 proximity, for example one access network per floor of an office building or in 

a private home. The connection between the unlicensed-radio transceivers and 
the associated controller is preferably provided by a fixed broadband network. 
Preferably communication over this network uses the internet protocol IP, 
which greatly facilitates the installation of the access network, permitting a 

25 subscriber to plug-in an unlicensed-radio transceiver in his own home and 

even move it temporarily to an alternative location, and consequently install an 
unlicensed-radio access point himself The combination of the small size of 
the access point coverage areas and the ease with which it can be installed and 
moved means that each access point controller will be controlling a very large 

30 but frequently changing number of cells compared to the equivalent base 
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station controller of a conventional cellular network. Consequently when a 
mobile station roaming somewhere in the unlicensed radio access network 
must be paged by the core network, the signalling load on the access point 
controller will be very high due to the large number of cells and access points 
implicated. 

SUMMARY OF THE INVENTION 

In the light of the above problems it is an object of the present invention to 
provide an unlicensed-radio access network capable of locating a mobile 
station in response to a paging signal from the core network without undue 
signalling load. 

This and further objects are achieved in an unlicensed-radio access network 
and method carried out in the same in accordance with the attached claims. 

Specifically, the unlicensed-radio access network is connected to a core 
network portion of a licensed mobile cellular network and includes an access 
controller connected to the core network and a fixed broadband network 
connected to the access controller and having a plurality of access points. Each 
access point defines a mini-cell coverage area and supports an unlicensed- 
radio interface permitting communication between mobile stations located 
within a respective mini-cell and the access controller. In accordance with the 
invention, the access controller is associated with one or more location areas 
in the licensed-radio mobile cellular network and comprises a database for 
storing the identification of mobile stations in association with address 
information on the fixed broadband network or at least one access point for 
each mobile station. 

The provision of a database for associating the identification of the mobile 
station with a broadband network address or the access point via which the 
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mobile station communicates with the access network essentially provides an 
intermediate level of mobility management. In this way the access network 
can actively direct messages from the core network towards a specific address, 
access point or group of access points to reduce the amount of signalling to 
5 and from the access points. 

The access points may either comprise separate entities capable of establishing 
a connection with the access controller even when no mobile station is located 
in its coverage area, or they may be essentially transparent access points or 

10 nodes to the broadband network that simply relay messages between a mobile 

station and the access controller while providing the conversion between the 
unlicensed-radio interface and the fixed broadband network. In this latter 
case, the mobile stations will be assigned a network address on the broadband 
network, since the access points are not recognised as separate entities by the 

15 access controller. 

Preferably, the access controller is adapted to receive from the core network 
portion a paging message containing the identification of a mobile station 
located in the associated location area, to identify the network address or 
20 access point associated with the identified mobile station and to transmit the 

paging message to the identified access point or points only. 

In accordance with a preferred embodiment of the invention, the database is 
updated without the involvement of the core network. Specifically, the access 

25 network controller is adapted to receive from a mobile station a message 

registering identification data for the mobile station and to store the new 
identification data in the database in association with information concerning 
an access point communicating with said mobile station. Similarly, the access 
controller is adapted to delete the identification data when the mobile station is 

30 no longer communicating with it. This may be on receipt of a message from 
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the access point that said mobile station is no longer communicating with said 
access point. Alternatively, the access controller may monitor the connection 
established with a mobile station and determine when this connection is no 
longer maintained. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Further objects and advantages of the present invention will become apparent 
from the following description of the preferred embodiments that are given by 
way of example with reference to the accompanying drawings. In the figures: 

Fig. 1 schematically depicts parts of a GSM network modified to 

include an unlicensed-radio access network, 

Fig. 2 schematically depicts the system of location areas in the 

modified GSM network of Fig. 1, and 

Fig. 3 schematically illustrates the unlicensed access network in 

accordance with the present invention for a first embodiment, 
and 

Fig. 4 schematically illustrates the unlicensed access network in 

accordance with the present invention for a second embodiment 
wherein the unlicensed-radio access network has transparent 
access points. 

DETAILED DESCRIPTION OF THE DRAWINGS 

Figure 1 schematically depicts parts of a conventional GSM network. This 
network is essentially divided into a core network portion 20 and an access 
portion 10. The elements of the core network illustrated in the figure include 
the mobile switching centers or MSc's 202, associated home location register 
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HLR 201 and visitor location register VLR 204. The function and structure of 
these conventional GSM architecture elements are known to those in the art 
and will not be described in further detail here. The core network also supports 
the General Packet Radio Service (GPRS), and to this end serving GPRS 
5 support nodes (SGSN) 203 are illustrated. Although not illustrated in the 

figure, it will be understood by those skilled in the art that the core network 
portion may include access to other mobile and fixed-line networks, such as 
ISDN and PSTN networks, packet and circuit switched packet data networks 
such as intranets, extranets and the Internet through one or more gateway 
10 nodes. 



The access portion essentially consists of base station subsystems BSS 10, one 
of which is illustrated in Fig. 1, which communicate via defined fixed standard 
A and Gb interfaces with MSCs 202 and SGSNs 203, respectively in the core 

15 network portion 20. Each base station subsystem BSS 10 includes a base 

station controller BSC 103 which communicates with one or more base 
transceiver stations BTS 101 via the defined A bis air interface 102. The base 
transceiver stations 101 communicate with mobile terminals MS 1 over the 
GSM standard U m radio air interface. It will be understood that while the BTS 

20 101 and BSC 103 are depicted as forming a single entity in the BSS 10, the 

BSC 103 is often separate from the BTSs 101 and may even be located at the 
mobile services switching centre MSG 202. The physical division depicted in 
Fig, 1 serves to distinguish between the parts of the network making up the 
access network portion 10 and those that form the core network portion 20. 

25 

In addition to the standard access network portion provided by the BSS 5 s 10 
the network depicted in Fig. 1 further includes a modified access network 
portion 30 shown in the lower half of the figure. Hereinafter this will be 
described as an unlicensed-radio access network portion 30. 



30 
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The components making up this unlicensed-radio access network portion 30 
also enable the mobile terminal 1 to access the GSM core network portion, and 
through this, other communication networks via an unlicensed-radio interface 
X, represented in Fig. 1 by the bi-directional arrow 31. By unlicensed-radio is 
5 meant any radio protocol that does not require the operator running the mobile 

network to have obtained a license from the appropriate regulatory body. In 
general, such unlicensed-radio technologies must be low power and thus of 
limited range compared to licensed mobile radio services. This means that the 
battery lifetime of mobile terminals will be greater. Moreover, because the 

10 range is low the unlicensed-radio may be a broadband radio, thus providing 

improved voice quality. The radio interface may utilise any suitable 
unlicensed-radio protocol, for example a wireless LAN protocol or Digital 
Enhanced Cordless Telecommunications (DECT). Preferably, however, 
Bluetooth radio is utilised, which has a high bandwidth and lower power 

15 consumption than conventional public mobile network radio. 

The Bluetooth standard specifies a two-way digital radio link for short-range 
connections between different devices. Devices are equipped with a 
transceiver that transmits and receives in a frequency band around 2.45GHz. 
20 This band is available globally with some variation of bandwidth depending 

on the country. In addition to data, up to three voice channels are available. 
Each device has a unique 48-bit address from the IEEE 802 standard. Built-in 
encryption and verification is also available. 

25 The element of the fixed access network portion 30 adapted to communicate 

across the Bluetooth interface is designated a local or home base station (HBS) 
301. This element handles the radio link protocols with the mobile terminal 
MS 1 and contains radio transceivers that define a cell in a similar manner to 
the operation of a conventional GSM base station transceiver BTS 101. The 

30 home base station HBS 301 is controlled by a home base station controller 
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HBSC 303, which communicates with a mobile service switching centre MSG 
202 over the GSM standard A interface and also with a serving GPRS support 
node SGSN 203 over a standard Gb interface, if available in the core network 
portion. The interface between the home base station HBS 301 and its home 
5 base station controller HBSC 303 is designated a Y-interface. The home base 

station controller HBSC 303 provides the connection between the MSC 202 or 
SGSN 203 and mobile terminal 1. The joint function of the home base station 
HBS 301 and the home base station controller HBSC 303 emulates the 
operation of the BSS 10 towards the SGSN 203 and MSC 202. In other words, 
10 when viewed from the elements of the core network 20 such as the mobile 

service switching centre (MSC) 202 and the serving GPRS support node 
(SGSN) 203, the fixed access network portion 30 constituted by the home base 
stations HBS 301 and the home base station controller HBSC 303 looks like a 
conventional access network portion 10. 

15 

The applications that run on the mobile terminal MS 1 on top of the public 
mobile network radio interfaces also run on top of Bluetooth radio between the 
mobile terminal 1 and the home base station HBS 301. 

20 The interface between the home base station HBS 301 and the home base 

station controller HBSC 303 which is designated Y in Fig. 1 is preferably 
provided by a fixed link. The home base station 301 is intended to be a small 
device that a subscriber can purchase and install in a desired location such as 
the home or an office environment to obtain a fixed access to the mobile 

25 network. However, they could also be installed by operators in traffic hotspots. 

In order to reduce the installation costs on the part of the operator, the 
interface between the home base station 301 and the home base station 
controller 303, which is designated interface Y in Fig. 1 therefore preferably 
exploits an already existing connection provided by a fixed network 302. 

30 Preferably this network is a broadband packet-switched network. Suitable 
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networks might include those based on ADSL, Ethernet, LMDS, or the like. 
Home connections to such networks are increasingly available to subscribers. 
Although not shown in Fig. 1, the home base station HBS 301 will be 
connected to a network terminal giving access to the fixed network 302, while 
the home base station controller HBSC 303 may be connected to an edge 
router ER of the network 302 that also links the fixed network 302 to other 
networks such as intranets and the internet. IP is used for communication 
between the home base station HBS 301 and home base station controller 
HBSC 303 over the fixed network 302 to render the transport of data 
independent of the network type. The link between the home base station HBS 
301 and the home base station controller HBSC 303 is preferably always open, 
so that this connection is always available without the need for reserving a 
channel. While the fixed network 302 is preferably an IP-based network, 
ATM-based networks could also be used. In particular when DSL 
technologies are used in this network, they could be used directly on top of the 
ATM layer, since they are based on ATM. Naturally, an ATM based network 
could also be used to transport IP, serving as a base layer. 

The home base station HBS 301 is installed by plugging it in to a port of a 
suitable modem, such as an ADSL or CATV modem, to access the fixed 
network 302. The port is in contact with an intranet that is either bridged or 
routed on the IP level. Thus standard protocols, such as IP, DHCP, DNS and 
the like are used. The home base station HBS 301 connected to the modem 
utilises these standard protocols and functions to establish a connection with a 
home base station controller HBSC 303. A sign-on procedure for a home base 
station 301 connecting for the first time or reconnecting to a home base station 
controller HBSC 303 is for example described in European patent application 
No. EP-A-1 207 708. Prior to establishing a voice or data connection between the 
home base station controller HBSC 303 and a home base station HBS 301 a static 
TCP connection is established between these elements across the fixed broadband 
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network 302. 



The base stations 101 and 301 in both the conventional access network 10 
portion and the unlicensed-radio access network portion 30 define a coverage 
area depicted in Fig. 1 by hexagonal cells 104, 304, respectively. While the 
relative dimensions of these cells are not accurate in the figure, it is 
nevertheless clear that the cell coverage of a conventional BTS 101 is far 
greater than the mini-cell generated by a comparatively low power home base 
station HBS 301. A mini-cell will have a diameter of around 50 to 200m. 

The GSM network is divided into several location areas LA, which are 
commonly separated geographically. A simplified logical structure of an 
extended GSM network showing the location areas is illustrated in Fig. 2. Four 
location areas, LAI, LA2, LA3 and LA4 are illustrated in Fig. 2. One mobile 
services switching center MSC 202 controls a location area LA and is 
connected to an associated visitor location register 204. All base station 
controllers BSCs 103 connected to this mobile services switching center MSC 
202 are assigned to this location area LA. This is also valid for all base station 
transceivers BTS 101 associated with each base station controller BSC 103, 
although these are not illustrated in Fig. 2 for reasons of clarity. While some 
mobile services switching centers MSC 202 may take care of more than one 
location area LA, location areas are not split between mobile services 
switching centers MSC 202. 

The mobile switching center MSC 202 in location area LA4 also controls a 
home base station controller HBSC 303. However, the home base station 
controller HBSC 303, and all home base stations HBS 301controlled by this 
home base station controller 303 are assigned a separate unique location area 
LA70. 
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The visitor location register VLR 204 connected to each mobile services 
switching center MSC 202 contains information about the mobile stations MS 
1 that are located in the location areas within the control of the associated 
mobile switching center MSC 202. The base station transceivers BTS 101 in 
each location area broadcast the location area to mobiles within the cell 104. 
A mobile roaming within the network is thus able to detect which location 
area it is in. When a mobile station 1 moves from a cell in one location area to 
a cell in a different location area, it sends a location area update message to the 
core network. The information corresponding to this mobile is then updated in 
the corresponding visitor location register VLR 204. If the visitor location 
register VLR 204 is different from the last visitor location register the mobile 
station was registered with, this information is also updated in the home 
location register HLR 201. When the core network needs to locate a mobile 
station, the location area information is retrieved from the current visitor 
location register VLR 204 and a paging message is then despatched to the 
relevant base station controllers BSC 103, depending on how paging is 
handled in the core network. For example if global paging is carried out the 
paging message is sent to all base station controllers BSC 103. Alternatively, 
a paging addressed may be to the mobile switching center MSC 202 
controlling the identified location area, which in turn forwards this paging 
message to all cells 104 (i.e. all base station transceivers BTS 101) within that 
location area. 

On the level of the core network 20, the same procedure is followed when a 
mobile station roams into the coverage area of an unlicensed-radio access 
point or home base station HBS 301. All home base stations HBS 301 
belonging to the same access network, i.e. all home base stations HBS 301 
connected to the same access point controller or home base station controller 
HBSC 303, are assigned to the same location area or group of location areas. 
A location area update message will thus be sent to the core network by the 
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mobile station MS 1 when the mobile station first enters a mini-cell 304. The 
paging of the mobile station is also identical from the core network side. The 
paging message is sent to the home base station controller HBSC 303. 
However, at this point the similarity with a conventional GSM cellular 
5 network ceases. Reference is now made to Fig. 3, which illustrates the 

unlicensed-radio access network 30 and specifically the home base station 
controller 303 in more detail. 

The unlicensed-radio access network depicted in Fig. 3 includes a home base 

10 station controller HBSC 303 connected via a fixed broadband network 302 to 

two access points or home base stations HBS1 and HBS2 301. Three mobile 
stations MSI - MS3 1 are located in the mini-cells 304 of these home base 
station controllers HBS 301. The home base station controller HBSC 303 is 
connected to a mobile services switching center MSC 202, which in turn has 

15 access to a visitor location register VLR 204. The remaining elements of a 

conventional cellular core network 20 are omitted from the figure. The home 
base station HBSC 303 in Fig. 3 comprises a database 3031 illustrated 
schematically as a table in the figure. This database 3031 contains 
identification information for all mobile stations operating in the coverage area 

20 of the unlicensed-radio access network 30. The identification information is 

preferably the International Mobile Subscriber Identity IMSL In any event, 
the identification information must be the same or at least indicative of the 
identification used by the core network 20 for each mobile station MS 1 . This 
information is conventionally signalled by a mobile station 1 to a base station 

25 when it is within the respective cell. In this database 3031 the mobile station 

identification information is coupled with the identification of the access point 
or home base station HBS 301 controlling the mini-cell 304 the mobile station 
is currently located in. This home base station identification may be an 
identifier assigned to this home base station HBS 301 or it may indicate the 

30 network address of the home base station HBS on the fixed broadband 
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network 302. By way of example, mobile station MSI is located in the mini- 
cell of home base station 1 . Consequently, the IMSI of this mobile station 
MSI is mapped to the identification of home base station 1 HBS1 in the home 
base station controller database 3031. Similarly, the IMSI of mobile station 
5 MS2 is mapped to home base station HBS1 and the IMSI of mobile station 

MS3 is mapped to home base station HBS2. 

In this way the home base station controller HBSC 303 upon receiving a 
paging message from the core network 20 is able to retrieve the current 

10 location of the mobile station MS 1 from the database 3031 and forward the 

paging message to the relevant home base station HBS 301 only. The paging 
message is transmitted via the established static TCP connection between the 
home base station controller HBSC 303 and the home base station HBS 301. 
As a result of the small size of the coverage areas of each home base station 

15 HBS 301 the number of mini-cells under the control of a single home base 

station controller HBSC 303 may number thousands. Moreover, this number 
may change constantly as a consequence of the ease with which the home base 
stations HBS 301 can be added or removed from the unlicensed-radio access 
network 30. 

20 

Enabling the home base station controller HBSC 303 to forward paging 
messages to the particular home base station HBS 301 in contact with a 
mobile station MS 1 thus means that the amount of signalling that would 
otherwise be required between the home base station controller HBSC 303 and 
25 all home base stations HBS 301 is greatly reduced. 

Preferably, the home base station controller HBSC 303 does not simply 
forward the paging message from the core network to the targeted home base 
station HBS but rather addresses the mobile station itself This avoids the 
30 paging message being broadcast in the home base station HBS 301 coverage 
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area and still further reduces the signalling traffic involved. 

The home base station controller database 3031 is updated in the following 
manner. When a mobile station MS 1 appears in the coverage area or mini- 
5 cell 304 of a home base station HBS 301 and is authorised to use its services, 

the identification of the mobile station MS 1 or IMSI is sent to the home base 
station HBS 301 over the unlicensed-radio interface X. The mobile station 
identification IMSI is then sent to the home base station controller HBSC 303, 
where it is stored in the database 3031 in association with information on the 

10 home base station HBS 301. It is noted that while the database illustrated in 

Fig. 3 shows the mobile station identifier and the home base station identifier 
as two sets of data, this is only one possible configuration. A further option 
would be to store the mobile station identification information at a specific 
address, location or field that is associated with the home base station HBS 

15 301. 

When the mobile station MS 1 leaves the coverage area of the home base 
station HBS 301 or is turned off while in this coverage area, the home base 
station HBS 301 informs the home base station controller HBSC 303 that the 

20 mobile station is no longer reachable and the mobile station identification 

information is updated in the home base station controller database 3031. 
Alternatively the home base station need not actively signal the cessation of 
communication with the mobile station, rather the static TCP connection 
between the home base station and home base station controller can be 

25 dropped. As discussed earlier, communication between the home base station 

HBS 301 and home base station controller HBSC 303 is conducted over a 
static TCP/IP connection. This connection requires an exchange of Keep 
Alive-messages to keep the connection alive. When a mobile station MS 1 is 
turned off or has left the coverage area of a home base station HBS 301, the 

30 home base station HBS 301 has no reason to maintain the static TCP 
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connection as no further messages are being received from the mobile station 
MS 1. The home base station controller HBSC 303 will recognise that no 
further Keep Alive-messages are being received from the home base station 
HBS 301 to maintain the static TCP connection and can consequently remove 
the address and identification data related to the mobile station MS on this 
home base station HBS 301. 

In an alternative embodiment, the database 3031 does not store the mobile 
station identifier and access point address on a one-to-one basis but rather 
associates mobile station identifiers with a group of access points 301. These 
access points 301 could, for example, be clustered together and thus be in a 
relatively small geographical area. In this manner, the home base station 
controller HBSC 303 would forward a paging message received from the core 
network 20 to a specific group of mini-cells only. This arrangement has the 
advantage the that database could be fragmented into several sections, each 
section being devoted to a specific geographical area, or possible to a specific 
subscriber. The update procedures described above would then be necessary 
only when a mobile station MS 1 moved out of the coverage area of a cluster 
of home base stations 301. 

The above description of an unlicensed-radio access network includes home 
base stations HBS 301 that function as end points in the access network 30 
actively establish and maintain a connection with the home base station 
controller HBSC 303. However, in an alternative embodiment of the access 
network 30, the home base stations HBC 301 are simply transparent access 
points for a mobile station MS using an unlicensed radio interface to the fixed 
broadband network 302 without specific functionality relating to the 
unlicensed-radio access network 30. With this arrangement, the mobile station 
MS 1 is provided with the necessary functionality to communicate directly 
with the home base station controller HBSC 303 over an unlicensed-radio 
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interface and the broadband network via the access point. Accordingly, the 
mobile station MS itself establishes a static TCP connection with the home 
base station controller HBSC over the fixed broadband network 302. 
Moreover, until such a connection is established there is no communication 
between the access point 301 and the home base station controller HBSC 303. 
The home base station controller HBSC 303 holds no information on the 
access point 301. 

When the unlicensed-radio access network takes this form, the home base 
station controller database 303 1 must be updated with information concerning 
the mobile station MS 1 only. This information includes the identification or 
IMSI of the mobile station as well as the fixed broadband network address via 
which the mobile station communicates. This embodiment is illustrated in 
Fig. 4. 

Fig. 4 shows the same elements as Fig. 3 with the exception that access points 
AP 301' replace home base stations HBS 301. The remaining elements are the 
same as in Fig. 3 and a detailed description of these elements will not be given 
here. With this modification in the unlicensed-radio access network 30, the 
home base station controller database 3031 now holds information identifying 
a mobile station MS 1 connected to the access network (IMSI) as well as the 
network or IP address "IPaddr" of this mobile station on the fixed broadband 
network. In the figure, mobile station MSI and mobile station MS2 have 
been assigned different IP addresses, namely IPaddrl and IPaddr2, 
respectively, although they communicate with the home base station controller 
via the same access point AP 1 . It will be understood, however, that the actual 
network address may be the same for both mobile stations, but that the 
identification of each mobile station is then used to address a specific mobile 
station. 
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In this embodiment also the home base station controller database 3031 holds 
data only on those mobile stations that are active within the coverage area of 
the unlicensed-radio access network 3. Each mobile station MS identity is 
stored with the associated network address when the mobile station 
5 establishes contact with the home base station controller HBSC 301. Unlike a 

home base station 301, a transparent access point 30 V is not able to detect 
when a mobile station MS 1 has left its coverage area or when a mobile station 
is switched off, nor is it able to communicate independently with the home 
base station controller HBSC 303. For this reason, a signalling mechanism is 

10 used between the mobile station MS 1 and the base station controller HBSC 

303 indicating that the connection between these two is alive. When the home 
base station controller HBSC 303 determines that a Keep Alive-message has 
not been received from the mobile station 1 within a certain time period or in 
response to another message, it will delete the corresponding entry in the 

15 database 3031. As described above with reference to Fig. 3, this messaging 

may be part of the messaging required to keep the static TCP connection alive 
between the mobile station and the home base station controller. 

The above detailed description of cell management has referred only to GSM 
20 networks as a conventional public mobile network. It will be understood by 

those skilled in the art, however, that the above description applies equally to 
other conventional public mobile networks, such as UMTS or CDMA2000. 



